pkgsrc-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

pkg/29641: pkg-vulnerabilities postgresql entries are insufficient



>Number:         29641
>Category:       pkg
>Synopsis:       pkg-vulnerabilities postgresql entries are insufficient
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Mar 09 13:54:00 +0000 2005
>Originator:     Klaus Klein
>Release:        n/a
>Organization:
Frobozz Magic Buglet Company
>Environment:
n/a

>Description:
        pkg-vulnerabilities only reflects the current naming and layout
        of the various postgresql packages.  This is insufficient since
        they do not take into consideration the recent naming _changes_ to
        deal with 7.3, 7.4 and 8.0 versions.

>How-To-Repeat:
        In pkg-vulnerabilities, see:
        postgresql73-lib<7.3.9  remote-code-execution   
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0245

        Have postgresql-lib-7.3.2 installed; watch audit-pkgs(1) (obviously)
        not match the above.
>Fix:
        Re-add entries predating the naming changes.




Home | Main Index | Thread Index | Old Index